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(54) Method and system for time synchronization 

(57) A metliod for synclironizing a timing device of 
a dlent station via a communications networl< Is dis- 
closed. A plurality of packets is sent from a time server 
to the client station via the communications network. Up- 
on receipt of the plurality of packets at the client station 
a time indicative of a local time of receipt of the plurality 
of packets is detemnlned and the plurality of packets are 



returned to the time server via the communications net- 
work. Upon receipt of the plurality of packets at the time 
server data in dependence upon round trip delay of the 
packets and variance in packet spacing are determined 
and compared to threshold values. If the determined da- 
ta are within the threshold values data indicative of a 
time con-ection are determined and sent from the time 
server to the client station. 
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Description 

Field of the Inv ntion 

[0001] TIlis invention reiates to time synclironlzation. 
and in particular to a method for synchronizing a time 
clock of a client station via a communications network 
having an unknown transmission time. 

Background of the Invention 

[0002] Most conventional computersystems maintain 
an internal clock to keep track of the time of day. Accu- 
rate time of day measurements are required in a wide 
variety of applications such as managing and tracking 
electronic mail, timing back-ups of data on a network, 
synchronizing communications between clients and 
servers, managing multimedia teleconferences, and as- 
signing a correct time to documents or transactions. 
Since the internal clock is not perfectly accurate, as time 
goes by the internal time maintained by the internal 
clock diverges from the external time with which the in- 
ternal clock was previously synchronized. This time di- 
vergence is sometimes called "clock drift". Typically the 
intemai clock's time drifts away from the time as a linear 
function of elapsed time since synchronization. To pre- 
vent the clock drift from getting too large, from time to 
time the Internal clock is resynchronized with the exter- 
nal reference time. Time services exist which provide 
accurate time Information using an "atomic clock". One 
well-known time sen^ice is WWV, which broadcasts a 
Universal Time Signal. Various solutions have been de- 
veloped to synchron Ize the time clock of a computer sys- 
tem. A simple method is for a user of the computer sys- 
tem to manually adjust the clock whenever the clock ap- 
pears to have drifted. This technique, however, is both 
inconvenient for the user and subject to its own inaccu- 
racies. 

[0003] Also, time sources such as WWV occasionally 
introduce "leap seconds" to synchronize their time with 
the motions of the planet Earth. To prevent en-or from 
accumulating due to drift and leap seconds, it is partic- 
ularly desirable to synchronize the Internal clock of a 
computer system with the external reference time auto- 
matically without intervention of a user or network ad- 
ministrator. 

[0004] Some prior art methods for synchronizing the 
intemai clock employ a round trip scheme in which a 
computer system sends a synchronization request to a 
time service and the time service responds by sending 
a synchronization message. The inaccuracy of time pro- 
vided to a computer system is directly related to the total 
elapsed time for the round trip sequence of messages. 
Thus, the precision with which clock synchronization 
can be achieved Is limited by the time required for the 
round trip sequence. 

[0005] A particular type of round trip synchronization, 
called Probabilistic Clock Synchronization has been 



used for synchronizing intemai times of computer sys- 
tems with a reference time from an external source via 
a communications network. The technique is described 
in Cristian, " Probabilistic Clock Synchronization", IBM 

5 Technical Disclosure Bulletin, Vol. 31 , No. 2 (July 1988), 
p. 91 which is incorporated herein by reference. The ba- 
sic round trip sequence works as follows: A client station 
sends a synchronization request at a time t, according 
to its clock. A time server responds with a message giv- 

10 ing a time T. according to the server's time clock. The 
client station receives the response at a time t'. It is thus 
established that the server's time T falls somewhere 
within the time interval between the client stations times 
t and t. Preferably, T is synchronized with the midpoint 

15 of the interval between t and f . Thus, the precision of 
the client station's synchronization is accurate to within 
(f - 1)/2. If the achieved precision is not considered good 
enough, the round trip message exchange sequence is 
repeated. This method provides means for taking the 

20 roundtrip delay time into account and, therefore, reduce 
the error occurring due to the transmission. However, 
this method requires a substantial amount of processing 
in real time. 

[0006] An improved version of "Cristian's" method is 
25 disclosed by Cheung et al. in U.S. Patent No. 5,535,21 7 
issued July 9, 1 996, which is incorporated herein by ref- 
erence. Enhanced precision is achieved by computing 
a new precision range for the synchronized time based 
on an Intersection between precision intervals of thecli- 
30 ent station's time and the time server's time. Unfortu- 
nately, also this method requires a substantial amount 
of processing in real time. Furthermore, both methods 
detemnine the time elapsed to transmit a message from 
the time server to the client station as half the round trip 
35 delay. 

[0007] In U.S. Patent No. 6,023,769 issued Febmary 
8, 2000, Gonzalez discloses a method and apparatus 
for synchronizing an imprecise time clock maintained by 
a computer system wherein a first time reading Is ob- 

^0 tained from a local timing service at a precision greater 
than that of the clock, and a second time reading is ob- 
tained from a remote time server at a precision greater 
than that of the clock. The second time reading from the 
time server is corrected for delays associated with the 

45 transmission over the network using the first time read- 
ing from the local timing service. This method may be 
able to give a more correct estimate of the time elapsed 
to transmit a message from the remote time server to 
the client station. However, it requires messages being 

50 transmitted between the client station and the local tim- 
ing service at a known transmission time or at a time 
less than the precision error of the local timing service. 
[0008] Furthemiore, none of these methods provide 
means for preventing tampering with the messages, for 

55 example, deliberately delaying the messages by a third 
unauthorized party. It is an object of the invention to pro- 
vide a method for synchronizing a timing device of a cli- 
ent station that substantially reduces the en-or due to 
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round trip delay. 

[0009] It is further an object of the invention to provide 
a method for synchronizing a timing device of a client 
station that substantially reduces real time processing 
at the time server as well as at the client station. 
[0010] It Is yet another object of the invention to pro- 
vide a method for synchronizing a timing device of a cli- 
ent station that substantially reduces the risk of tamper- 
ing by an unauthorized third party. 

Summary of the Invention 

[0011] In accordance with the invention there is pro- 
vided, a method for synchronizing a timing device of a 
client station. The method comprises the steps of: 



detemnining data in dependence upon round trip de- 
lay of the packets and variance in packet spacing 
and comparing the data to threshold values. 

5 [0013] In accordance with the invention there Is fur- 
ther provided, a system for synchronizing a timing de- 
vice of a client station via a communications network. 
The system comprises: 

10 first processing means connected to the communi- 
cations network and a time clock; and, second 
processing means connected to the communica- 
tions networi< and the timing device, 

15 wherein the first processing means comprise: 



10 



15 



sending a plurality of packets, each packet being 
sent at a predetemiined time, from a time server to 
the client station via a communications network; 

20 

receiving the plurality of packets at the client station; 

detenmining a time indicative of a local time of re- 
ceipt of the plurality of packets at the client station 
and storing time data in dependence thereon; 25 

returning the plurality of packets to the time server 
via the communications network; 

determining a time indicative of a local time of re- so 
ceipt of the plurality of packets at the time server; 
and, 

determining data in dependence upon round trip de- 
lay of the packets and variance in packet spacing 35 
and comparing the data to threshold values. 

[0012] In accordance with the invention there is pro- 
vided, a method for synchronizing a timing device cou- 
pled to a communications networi<. The method com- 40 
prises the steps of: 

sending a plurality of packets, each packet being 
sent at a predetemiined time, from a first node to a 
second node via a communications network; ^5 

receiving the plurality of packets at the second 
node; 

determining a time indicative of a local time of re- so 
ceipt of the plurality of packets and providing time 
data in dependence thereon; 

retuming the plurality of packets to the first node via 
the communications network; 

determining a time indicative of a local time of re- 
ceipt of the plurality of packets at the first node; and, 



means for sending In real time a plurality of packets, 
each packet being sent at a predetermined time, via 
the communications network to second processing 
means; 

means for receiving the plurality of packets from the 
second processing means in real time; 

means for detemnining in real time a time indicative 
of a time of receipt of each of the plurality of packets; 

means for determining data in dependence upon 
round trip delay of the packets and variance in pack- 
et spacing and comparing the data to threshold val- 
ues; 

means for detemnining data Indicative of a correct 
time in dependence upon time data from the time 
clock and the data in dependence upon round trip 
delay of the packets and variance in packet spac- 
ing; and. 

means for sending a signal comprising the data in- 
dicative of a time correction to the second process- 
ing means via the communications network; and, 

wherein the second processing means comprise: 

means for receiving a plurality of packets from the 
first processing means In real time; 

means for detemnining In real time a time indicative 
of a time of receipt of each of the plurality of packets; 

means for returning the plurality of packets in real 
time to the first processing means; 



means for synchronizing the timing device in de- 



means for receiving a signal comprising the data in- 
55 dicative of a time correction from the first processing 
means; and, 
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pendence upon the data indicative of the time cor- 
rection. 

Brief De cripti nofth Drawings 

[0014] Exemplary embodiments of the invention will 
now be described in conjunction with the drawings, in 
which: 

[0015] Fig. 1 a is a schematic diagram of a client sta- 
tion connected to a time server via a communications 
networl< according to the invention; 
[001 6] Fig. 1 b is a simplified flow diagram of a method 
for synchronizing a timing device of a client station ac- 
cording to the invention; 

[0017] Fig. 1 c is a timing diagram illustrating timing of 
the plurality of pulses according to the disclosed method 
for synchronizing a timing device; 
[001 8] Fig. 2a is a schematic diagram of a plurality of 
client stations connected to a time server via a commu- 
nications network; 

[0019] Fig. 2b is a simplified flow diagram of another 
embodiment of the method for synchronizing a timing 
device of a client station according to the invention; 
[0020] Fig. 3 is a simplified flow diagram of another 
embodiment of the method for synchronizing a timing 
device of a client station according to the invention; 
[0021] Fig. 4 is a simplified flow diagram of another 
embodiment of the method for synchronizing a timing 
device of a client station according to the invention; 
[0022] Fig. 5 is a simplified flow diagram of yet another 
embodiment of the method for synchronizing a timing 
device of a client station according to the invention; 
[0023] Fig. 6 Is a simplified flow diagram of another 
method for synchronizing a timing device of a client sta- 
tion according to the invention; 
[0024] Fig. 7a is a simplified flow diagram of a method 
for detennining data Indicative of a time correction ac- 
cording to the invention; 

[0025] Fig. 7b is a simplified flow diagram of another 
method for detennining data indicative of a time con-ec- 
tion according to the invention; 
[0026] Fig. 7c is a simplified flow diagram of another 
method for determining data Indicative of a time correc- 
tion according to the Invention; 
[0027] Fig. 7d is a timing diagram illustrating evalua- 
tion of the timing of the plurality of pulses according to 
the method shown in Fig. 7c; 

[0028] Fig. 7e is a simplified flow diagram of another 
method for determining data indicative of a time con'ec- 
tion according to the invention; 
[0029] Fig. 7f is a timing diagram illustrating evalua- 
tion of the timing of the plurality of pulses according to 
the method shown in Fig. 7e; and, 
[0030] Fig. 7g is a simplified flow diagram of yet an- 
other method for determining data indicative of a time 
correction according to the invention; 



Detail d Description of the inv nti n 

[0031] Referring to Figs. 1a and lb, a method for syn- 
chronizing a timing device 4 of a client station 1 accord- 
s Ing to the invention Is shown. The client station 1 of sys- 
tem 10 is connected to a time server 3 via a communi- 
cations network 2 such as the Internet. The time server 
3 sends a plurality of digital signals (hereinafter, referred 
to simply as "packets"), each comprising m bits, at pre- 
10 determined times via the communications network 2 to 
the client station 1 , shown In Fig. 1 b as step 101 . Pref- 
erably, each packet comprises an Identifier, for example 
the number of the packet, and an identifier of the time 
server 3 in the form of at least a random number. Upon 
IS receipt 1 02 of each of the packets at the client station 
1 , a time indicative of a local time of receipt of each of 
the packets is detemained and time data in dependence 
thereon are stored 104. The packets are then returned 
1 06 to the time server 3 via the communications network 
20 2, where upon receipt 107 a time indicative of a local 
time of receipt of each of the plurality of packets is de- 
temriined 1 09. Fig. 1 c shows a distribution of the packets 
versus a time axis for steps 1 02, 1 06, and 1 07, respec- 
tively, indicated by i, II, and III. At a predetennined time 
25 t the server sends n packets 5 such that time intervals 
At between consecutive packets are a same, shown in 
diagram I. As is obvious to a person of skill in the art, 
same time Intervals between consecutive packets Is 
preferred but not required for the Invention. Diagram 11 
30 shows the distribution of the n packets 5 upon receipt at 
the client station 1 versus a local time axis f . Due to 
random variations of the transmission speed of each of 
the packets, the time Intervals between consecutive 

packets will be different, as indicated by At,At',Af" 

35 In diagram III the distribution of the n packets 5 upon 
receipt at the time server 3 versus a local time axis t is 
illustrated. The first packet arrives at a time t\ which is 
the predetermined time fplus a round trip delay for the 
first packet. Time differences between consecutive 
40 packets an-iving at the time server are again different 
and differ from the respective time differences in dia- 
gram II as well, as indicated by At\Ar,Ar\.,. . Varia- 
tions In the round trip delays of the n packets provides 
useful infonnation about network behavior during the 
45 transmission such as random variations of the transmis- 
sion speeds or a slow down of the communications net- 
work 2, if the number n of the packets is sufficiently large 
(for example: n = 100). 

[0032] In step 111 the packets are analyzed in order 
50 to determine data in dependence upon round trip delay 
and variations in spacing between consecutive packets. 
These data are then compared to threshold values 113 
and if the data are within the threshold values the proc- 
ess of time correction is continued. In step 117 data in- 
55 dicative of a time correction are determined and a signal 
comprising the data indicative of a time correction is sent 
from the time sever 3 to the client station 1 as shown In 
step 1 1 9. Methods for determining the data of a time cor- 
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rection according to the invention will be described in 
detail at a later point. Upon receipt 1 20 of the signal com- 
prising the data indicative of a time correction the timing 
device 4 of the client station 1 is synchronized accord- 
ingly 122. s 
[0033] If the data in step 113 are not within the thresh- 
old values, the steps 1 01 to 113 are repeated or an en-or 
indicator is sent 115 notifying a user of the client station 
1 or a network administrator. Preferably, the threshold 
values are determined using a statistical evaluation of 
the round trip delays within the network. This allows de- 
tection of any irregularities in the communications net- 
work such as technical problems or an attack of a "Man 
in the Middle" delaying transmission of the packets. 
[0034] Steps 101 to 109 of the method according to 
the invention are perfomied in realtime. These steps do 
not require much processing and can easily be per- 
formed by a processor in parallel to other tasks. The 
more elaborate steps 111 to 117 may be performed at 
any time, for example, when workload of a processor Is 
reduced. Therefore, the method according to the inven- 
tion obviates the need for large processing capacity of 
the time server 3 compared to the prior art. 
[0035] In another embodiment of the method accord- 
ing to the invention the time server 3 sends 201 a plu- 
rality of packets to all nodes of a communications net- 
wori< 2, as shown in Figs. 2a and 2b. Non responding 
nodes are indicated by circles In Fig. 2a. Responding 
client stations 1A to 1D, for example, attach 202 to at 
least one of the packets an authentlcator Identifying the 
client station before returning them to the time server 3. 
The time server 3 extracts the authentlcator from each 
plurality of packets received from the client stations 1 A 
to ID in step 203 in order to identify each responding 
client station before further processing the packets ac- 
cordingly. A signal comprising the data indicative of a 
time correction is then sent 219 to each identified client 
station. This method further reduces the workload of the 
processor of the time server 3 by sending only one plu- 
rality of packets for synchronizing a plurality of clients 
1Ato ID. 

[0036] Referring to Fig. 3, another embodiment of the 
method according to the invention Is shown. Each of the 
plurality of packets sent 301 from the time server com- 
prises a tamper proof identifier of the time server 3. For 
example, a tamper proof identifier includes a random 
number or a signed identification as is obvious to a per- 
son of skill In the art. The client station compares the 
identifier with a reference 302 and if the time server 3 is 
identified returns the packets 1 06. If the time server can- 
not be identified the synchronization process is stopped 
by theclient station. Optionally, the client station 1 sends 
a warning signal 306 to the time server 3 or a network 
administrator when sen/er identification fails. The time 
server 3 itself compares the identification with a refer- 
ence In step 307 and continues with the synchronization 
process If the packets have been Identified 309 as the 
ones sent by the time sender 3. If the packets cannot be 



Identified 309 by the time server 3 the synchronization 
process Is optionally repeated with step 301 and/or the 
time server may sent a warning message 311 . There- 
fore, this method substantially enhances security by 
providing means to reliably recognize If the packets had 
been tampered with by an unauthorized third party. 
[0037] Security is further enhanced by securely sign- 
ing the data indicative of a time correction, as shown in 
step 401 in Fig. 4. The client station 3 compares the sig- 
nature with a reference 402 and synchronizes its timing 
device 4 only after the comparison is indicative of a 
match 404. Methods for securely signing the data, for 
example, encryption algorithms are well known in the 
art. 

[0038] Fig. 5 shows yet another embodiment of the 

method according to the invention. In step 502 each 
packet Is time stamped at the client station 1 with data 
indicative of a local time of receipt of the packet at the 
client station 1 . This method provides valuable infomia- 
tion to the time server 3 which is there extracted 503 for 
a more accurate estimate of a transmission time needed 
by a packet to travel from the time sen/er 3 to the client 
1 , thus enhancing accuracy of the synchronization. The 
method for detemiining the transmission time according 
to the invention is discussed hereinbelow. 
[0039] Fig. 6 illustrates another method for synchro- 
nizing a timing device 4 of a client station 1 according 
to the Invention.The client station 1 sends 601 aplurallty 
of packets, each at a predetermined time via communi- 
cations network 2 to time server 3. Upon receipt 602 of 
the packets the time server 3 determines 604 data in- 
dicative of a correct time of receipt of each of the plurality 
of packets and time stamps 606 each of the packets with 
the data indicative of the correct time of receipt of the 
packet. The time stamped packets are then returned 
608 to the client station 1 via the communications net- 
work 2 . Upon receipt 609 of the packets the client station 
1 determines 61 1 data indicative of a local time of receipt 
for each of the plurality of packets. In step 61 3 the pack- 
ets are analyzed in order to detennine data in depend- 
ence upon round trip delay and variations in spacing be- 
tween consecutive packets. These data are then com- 
pared to threshold values 615 and if the data are within 
the threshold values data indicative of a time correction 
are determined 617. In step 619 the timing device 4 of 
the client station 1 is synchronized according to the data 
indicative of a time correction. 
[0040] This method requires only minimal processing 
capabilities for the time server 3. all steps concerning 
data evaluation are done by the client station. Further- 
more, only steps 601 to 61 1 have to be performed in real 
time, leaving the elaborate steps of data evaluation - 
steps 61 3 to 61 9 - for times of minimum wori<load of the 
client station 1 . 

[0041] As is evident to a person of skill in the art, all 
embodiments discussed with reference to Figs. 3, 4, and 
5 are also applicable to this method according to the In- 
vention as well as the following embodiments for the de- 
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termination of data indicative of a time con-ection. 
[0042] In the following, various methods according to 
the invention for determining data indicative of a time 
correction used in step 117 are described. 
[0043] A first simple method for determining data In* s 
dicative of a time correction is illustrated in Fig. 7a. A 
round trip delay value for each of the plurality of packets 
is determined as difference between the time each 
packet has been received at the time server 3 and the 
predetermined time each packet has been sent from the 
time server 3. A minimum round trip delay value is de- 
termined among the round trip delay values of each of 
the plurality of packets. Data indicative of a correct time 
are then calculated by adding half of the minimum round 
tn'p delay value to the predetemnined time the packet 
having the minimum round trip delay value has been 
sent by the server. 

[0044] Fig. 7b shows an improved embodiment of the 
previous method, which Is preferable if the round trip de- 
lays of the packets vary considerably. Here, interpola- 
tion using at least two round trip delay values is applied 
in order to detennine a more accurate minimum round 
trip delay value. In an additional step, a predetemiined 
time corresponding to the interpolated minimum round 
trip delay value Is calculated. Data indicative of a connect 
time are then calculated by adding half of the interpolat- 
ed minimum round trip delay value to the interpolated 
predetemiined time. 

[0045] The assumption that the transmission time of 
a packet from the time server 3 to the client 1 station is 
half the round trip time of the packet does not take into 
account variations of the transmission speed between 
the transmission to the client station 1 and the transmis- 
sion to the time server 3. Therefore, use of these meth- 
ods can result in rather inaccurate time con-ections. 
More accurate methods according to the invention for 
calculating the transmission time of the packets from the 
time server 3 to the client station 1 will be described in 
the following. Despite the fact that the following methods 
are more elaborate concerning the detennination of a 
time correction they do not require substantially more 
processing capabilities. Most steps do not require 
processing in real time and are performed at any avail- 
able timeslot. 

[0046] Referring to Figs. 7c and 7d a more accurate 
method for calculating the transmission time of the pack- 
ets from the time server 3 to the client station 1 is shown. 
Fig. 7c illustrates the processing steps of the method. 
Fig. 7d shows time diagrams for the pulses sent from 
the time server I and received at the client station II. 
First, a round trip delay value for the first packet of the 
plurality of packets is detemiined. A first time difference 
750 between the first packet and a following packet is 
detemnined for each of the following packets at the time 
the packets have been sent from the time server 3 
(shown in Fig. 7d for the fourth packet). In the next step 
a second time difference 752 between the first packet 
and a following packet Is detemiined for each of the fol- 



lowing packets at the local time the packets have been 
received at the client station 1 (shown in Fig. 7d for the 
fourth packet). 

[0047] Subtracting the second time difference 752 
from the first time difference 750 for each packet results 
in a third time difference 754 for each packet. A positive 
value for the third time difference indicates that the cor- 
responding packet traveled faster from the time server 
3 to the client station 1 than the first packet. Accordingly, 
a negative value Is indicative of a slower transmission. 
Therefore, a packet having a minimum travel time from 
the time server 3 to the client station 1 is indicated by 
having the maximum th ird time difference. The assumed 
travel time of the first packet being half of Its round trip 
time is then corrected by subtracting the maximum third 
time difference from half of the round trip delay value of 
the first packet resulting in a minimum travel time of the 
corresponding packet. Data indicative of a correct time 
are then calculated by adding the minimum travel time 
to the predetemnined time of the corresponding packet. 
[0048] Accuracy of the above method is further im- 
proved by detemiining a minimum round trip delay value 
and a corresponding packet Instead of the first packet 
for the assumption that the travel time from the time 
server 3 to the client station 1 1s half the round trip delay 
value, which is then corrected. This improved method is 
shown in Figs. 7e and 7f . It differs from the above meth- 
od by Includlngthestep of detemiining a minimum round 
trip delay value and a corresponding packet. Then the 
first and second time differences are determined be- 
tween the packet having the minimum round trip delay 
value and each of the other packets of the plurality of 
packets. Fig. 7f shows time diagrams for first time dif- 
ferences 760 and 770, with k being the packet having 
minimum round trip delay and k - 2 being a packet sent 
before the 1^^ packet and /c+ 2 being a packet sent after 
the l^^ packet. Time differences of packets sent before 
the ^ packet are of negative value. Analogously, sec- 
ond time differences 762 and 772 and third time differ- 
ences 764 and 774 are shown in Fig. 7f. As described 
above the packet having a minimum travel time from the 
time server 3 to the client station 1 Is indicated by the 
maximum third time difference. A minimum travel time 
from the time server 3 to the client station 1 is then de- 
termined by subtracting the maximum third time differ- 
ence from half of the round trip delay value of the packet 
having the minimum round trip delay. Data indicative of 
a correct time are then calculated by adding the mini- 
mum travel time to the predetemiined time of the conre- 
sponding packet. 

[0049] If it is known that a local time of a client station 
1 is within known error bounds, preferably, the error be- 
ing less than half the round trip delay value, the method 
according to the invention shown in Fig. 7g can be ap- 
plied. A travel time for each of the plurality of packets 
from the time server to the client station is determined 
as the difference between the predetemnined time the 
packet was sent from the server and the local time the 
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packet was received at the client station. Preferably, a 
minimum travel time is detennined and added to the pre- 
determined time of the corresponding packet in order to 
obtain data indicative of a correct time. Optionally, two 
minimum travel times are detennined based on the time 
for a packet to travel from the server to a client - based 
on the two different time sou rces - and a time for a pack- 
et to travel back to the server. The two minimum travel 
times are then used with the packet an-ival times to de- 
tennine data indicative of a correct time for synchroni- 
zation of the client system. 

[0050] The methods for synchronizing a timing device 
of a client station according to the invention are highly 
advantageous over the prior art. Transmitting a plurality 
of packets and evaluating the transmission of the plu- 
rality of packets substantially increases accuracy if a 
sufficiently large number of packets are used having 
predetemnined spacing therebetween. Furthermore, it 
allows statistical evaluation of the transmission through 
the network In order to detect any irregularities such as 
technical problems or tampering with the packets by an 
unauthorized third party. 

[0051] Another advantage of the methods according 
to the invention is the reduction in real time processing 
required, only the steps of transmitting the plurality of 
packets and determining a time of receipt of the packets 
have to be performed in real time. These steps do not 
require much processing and can be perfomned parallel 
to other tasks. 

[0052] The methods as disclosed above are easily im- 
plemented in the system shown in Fig. 1 a, for example, 
as a software package for execution on processors 7 
and 9 of the client station 1 and the time server 3, re- 
spectively. The software may be distributed on a 
CD-ROM or via the communications network 2. Alterna- 
tively, processors 11 and 13 for synchronizing the timing 
device 4 are connected to the client station 1 and the 
time server 3, respectively, as a peripheral device. 
[0053] Of course, numerous other embodiments may 
be envisaged without departing from the spirit and 
scope of the claimed invention. 



Claims 

1 . A method of synchronizing a timing device of a cli- 
ent station comprising the steps of: 

a) sending a plurality of packets, each packet 
being sent at a predetermined time having a 
predetemnined temporal spacing from other 
packets, from a time server to the client station 

. via a communications network; 

b) receiving the plurality of packets at the client 
station; 

c) determining a time indicative of a local time 



of receipt of the plurality of packets at the client 
station and storing time data in dependence 
thereon; 

5 d) returning the plurality of packets to the time 

server via the communications network; 

e) determining a time indicative of a local time 
of receipt of the plurality of packets at the time 

10 server; and, 

f) determining synchronisation data in depend- 
ence upon round trip delay of the packets and 
variance in temporal spacing of received pack- 

« ets. 

2. A method of synchronizing a timing device of a cli- 
ent station as defined in claim 1 , comprising the 
steps of: 

20 

g) comparing the synchronisation data to 
threshold values; 

h) determining data indicative of a time correc- 
25 tion if the detennined data of step f) are within 

the threshold values; and, 

i) sending a signal comprising the data indica- 
tive of a time correction from the time server to 

30 the client station. 

3. A method of synchronizing a timing device of a cli- 
ent station as defined in claim 1 , comprising the step 
of: 

35 

g) comparing the synchronisation data to 
threshold values; and, 

h) repeating steps a) to f) If the data determined 
40 in step f) are not within the threshold values. 

4. A method of synchronizing a timing device of a cli- 
ent station as defined in claim 1 , wherein the plural- 
ity of packets are sent at predetermined times such 

45 that temporal spacing between consecutive pack- 
ets are a same. 

5. A method of synchronizing a timing device of a cli- 
ent station as defined in claim 2, comprising the 

50 steps of: 

]) receiving the signal comprising the data in- 
dicative of a time correction at the client station ; 
and, 

55 

k) synchronizing the timing device of the client 
station in dependence upon the received sig- 
nal. 
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6. A method of synchronizing a timing device of a cli- 
ent station as defined in claim 1 , wherein during the 
step a) the time server sends a plurality of packets, 
each packet being sent at a predetermined time, to 
each of a plurality of client stations via the commu- 
nications network. 

7. A method of synchronizing a timing device of a cli- 
entstatlon as defined in claim 1 , wherein each pack- 
et comprises a binary signal of m bits, the binary 
signal comprising an identifier of the packet and an 
identifier of the time server. 

8. A method of synchronizing a timing device of a cli- 
ent station as defined In claim 7, wherein the iden- 
tifier of the time server comprises at least a random 
number. 

9. A method of synchronizing a timing device of a cli- 
ent station as defined In claim 7, comprising the step 
of: 

attaching to at least one of the packets authen- 
tication data for identifying the client station, the 
data attached by the client station. 

10. A method of synchronizing a timing device of a cli- 
ent station as defined In claim 7, comprising the 
steps of: 

comparing upon receipt of the packets at the 
time server the identifier of the time server with 
a reference identifier; and, 

if the comparison result is not indicative of a 
match, repeating steps a) to e). 

11. A method of synchronizing a timing device of a cli- 
ent station as defined in claim 9, comprising the 
steps of: 

comparing upon receipt of the packets at the 
time server the authentication data identifying 
the client station with reference authentication 
data; and, 

if the comparison result is not indicative of a 
match, repeating steps a) to e). 

12. A method of synchronizing a timing device of a cli- 
ent station as defined in claim 2, wherein step 1) 
comprises the step of: 

signing securely at the time server the signal 
comprising the data indicative of a time corec- 
tion. 

13. A method of synchronizing a timing device of a cli- 



ent station as defined in claim 12, comprising the 
steps of: 

receiving the signal comprising the data indic- 
s ative of a correct time at the client station; 

verifying the signature of the time server; and, 

If the signature is verified, synchronizing the 
10 timing device of the client station in depend- 

ence upon the received signal. 

14. A method of synchronizing a timing device of a cli- 
ent station as defined in claim 7, comprising the step 

15 of: 

time-stamping each of the packets at the client 
station by adding time data indicative of the cli- 
ent station's timing device time at the time In- 
20 stance of receipt of each of the packets. 

15. A method of synchronizing a timing device of a cli- 
ent station as defined in claim 1 , comprising the step 
of: 

25 

providing a warning signal if the round trip de- 
lays of the packets are not within a threshold 
value, thethreshold value being determined us- 
ing a statistical estimate of round trip delays of 
30 the communications network. 

16. A method of synchronizing a timing device of a cli- 
ent station as defined in claim 10, wherein step h) 
comprises the steps of: 

35 

determining a round trip delay value for each of 
the plurality of packets; 

determining a minimum round trip delay value; 
40 and, 

calculating data Indicative of a correct time by 
adding half of the minimum round trip delay val- 
ue to the predetennined time the packet having 
45 the minimum round trip delay value has been 

sent by the server. 

17. A method of synchronizing a timing device of a cli- 
ent station as defined in claim 2, wherein step h) 

50 comprises the steps of: 

determining a round trip delay value for each of 
the plurality of packets; 

55 detemnining a minimum round trip delay value 

by interpolating using at least two round trip de- 
lay values; 
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determining an Interpolated predetermined 
time corresponding to the Interpolated round 
trip delay value; and, 

calculating data indicative of a correct time by 
adding half of the Interpoiated minimum round 
trip delay value to the Interpolated predeter- 
mined time. 

18. A method of synchronizing a timing device of a cli- 
ent station as defined in claim 14, wherein step h) 
comprises the steps of: 

detemriining a round trip delay value for the first 
packet of the plurality of pacl<ets; 

determining for each packet following the first 
packet a first time difference between the first 
packet and the each packet at the time sent 
from the server; 

detemiining for the each packet following the 
first packet a second time difference between 
the first packet and the each packet at the time 
received at the client station; 

detennining a third time difference by subtract- 
ing the second time difference from the first 
time difference for the each packets; 



minimum round trip delay are of negative value; 

determining for the each packet a second time 
difference between the packet having the min- 
5 imum round trip delay and the each packet at 

the time received at the client station, wherein 
time differences of packets received before the 
packet having the minimum round trip delay are 
of negative value; 

10 

determining a third time difference by subtract- 
ing the second time difference from the tirst 
time difference for the each packets; 

IS detennining a maximum third time difference 

and a corresponding packet, the corresponding 
packet having a minimum travel time from the 
server to the client station; 

20 determining the minimum travel time by sub- 

tracting the maximum third time difference from 
half of the round trip delay value of the packet 
having the minimum round trip delay; 

25 calculating data indicative of a correct time by 

adding the minimum travel time to the prede- 
termined time of the corresponding packet. 

20. A method of synchronizing a timing device of a cli- 
30 ent station as detined in claim 14, wherein step h) 
comprises the steps of: 

determining a travel time for each of the plural- 
ity of packets from the time server to the client 
station, the travel time being the difference be* 
tween the predetennined time the packet was 
sent from the server and the local time the pack- 
et was received at the client station, wherein 
the time of the client station Is within known er- 
ror bounds; 

determining a minimum travel time from the 
travel times of the plurality of packets; and, 



detennining a maximum third time difference 
and a corresponding packet, the con^esponding 
packet having a minimum travel time from the 
server to the client station; 

detennining the minimum travel time by sub- 
tracting the maximum third time difference from 
half of the round trip delay value of the first 
packet; and, 

calculating data indicative of a correct time by 
adding the minimum travel time to the prede- 
tennined time of the corresponding packet. 
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19. A method of synchronizing a timing device of a cli- 
ent station as defined in claim 14, wherein step h) 
comprises the steps of: 

detennining a round trip delay value for each of 
the plurality of packets; 

detennining a minimum round trip delay value; 

detennining for each packet a first time differ- 
ence between the packet having the minimum 
round trip delay and the each packet at the time 
sent from the server, wherein time differences 
of packets sent before the packet having the 



45 calculating data indicative of a correct time by 

adding the minimum travel time to the prede- 
termined time of the corresponding packet. 

21 . A method of synchronizing a timing device coupled 
so to a communications network comprising the steps 
of: 

a) sending a plurality of packets, each packet 
being sent at a predetermined time, from a tirst 

55 node to a second node via a communications 

networic; 

b) receiving the plurality of packets at the sec- 
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ond node; 

c) determining a time indicative of a local time 
of receipt of the plurality of packets and provid- 
ing time data In dependence thereon; s 

d) returning the plurality of packets to the first 
node via the communications network; 



22. A method of synchronizing a timing device coupled 

to a communications network as defined in claim 20 
21 , comprising the step of: 

detennlnlng data Indicative of a time correction 
if the detemnined data of step f) are within the 
threshold values. 25 

23. A method of synchronizing a timing device coupled 
to a communications network as defined in claim 22 
wherein the provided time data is appended to a 
packet and is returned with the packet to the first 30 
node. 

24. A method of synchronizing a timing device coupled 
to a communications network as defined in claim 

21 , comprising the step of: 35 

repeating steps a) to f) if the data detemnined 
in step f) are not within the threshold values. 

25. A method of synchronizing a timing device coupled 40 
to a communications network as defined in claim 

21 . wherein in step (c) each of the packets is time 
stamped with a local time of the second node. 

26. A method of synchronizing a timing device coupled 45 
to a communications network as defined in claim 
21 , wherein steps a) to e) are processed in real time. 

27. A system of synchronizing a timing device of a client 
station via a communications network comprising: 

first processing means connected to the com- 
munications network and a time clock; and, 

second processing means connected to the 
communications network and the timing de- 
vice, 



wherein the first processing means comprise: 

means for sending in real time a plurality of 
packets, each packet being sent at a predeter- 
mined time, via the communications network to 
second processing means; 

means for receiving the plurality of packets 
from the second processing means in real time; 

means for determining in real time a time indic- 
ative of a time of receipt of each of the plurality 
of packets; 

means for determining data In dependence up- 
on round trip delay of the packets and variance 
in packet temporal spacing and comparing the 
data to threshold values; 

means for determining data Indicative of a cor- 
rect time in dependence upon time data from 
the time clock and the data in dependence upon 
round trip delay of the packets and variance in 
packet temporal spacing; and, 

means for sending a signal comprising the data 
indicative of a time con-ection to the second 
processing means via the communications net- 
work; 

and, 

wherein the second processing means com- 
prise: 

means for receiving a plurality of packets from 
the first processing means in real time; 

means for detennining in real time a time indic- 
ative of a time of receipt of each of the plurality 
of packets; 

means for returning the plurality of packets in 
real time to the first processing means; 

means for receiving a signal comprising the da- 
ta indicative of a time correction from the first 
processing means; and, 



means for synchronizing the timing device in 
50 dependence upon the data indicative of the 

time conrection. 

28. A system of synchronizing a timing device of a client 
station via a communications network as defined in 
55 claim 27, the second processing means comprising 
means for time-stamping each of the packets in real 
time. 



e) detemnining a time indicative of a local time 10 
of receipt of the plurality of packets at the first 
node; and, 

f) detennining data in dependence upon round 
trip delay of the packets and variance in packet is 
spacing and comparing the data to threshold 
values. 
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29. A system of synchronizing a tinning device of a client 
station via a comnriunications network as defined in 
claim 27, the second processing means comprising 
means for attaching in real time to at least one of 
the packets an authentk^ator identifying the client 5 
station. 

30. A system of synchronizing a timing device of a client 
station via a communications network as defined in 
claim 27, the first processing means comprising io 
means for identifying the client station by its authen- 
ticate r. 

31 . A system of synchronizing a timing device of a client 
station via a commu nications network as defined In is 
claim 27, the first processing means comprising 
means for retrieving time data from each time 
stamped packet. 
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